moved things around and improved auth instructions